Principal Information Security Engineer

Job Summary

Responsible for strengthening the security posture of the organization, the full-time remote Principal Information Security Engineer will lead cybersecurity risk assessments, manage security awareness initiatives, and develop risk mitigation strategies while serving as a trusted advisor across various business units.

Key responsibilities:

• Lead cybersecurity risk assessments and security maturity evaluations using industry frameworks to identify control gaps and emerging risks
• Develop and execute risk-informed phishing campaigns and cybersecurity education programs to enhance employee awareness and cyber resilience
• Collaborate with business leaders to translate complex cybersecurity risks into actionable business insights and recommendations

Required qualifications:

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, Business Administration, or a related field
• 5+ years of experience in Information Security, Cybersecurity, IT Risk Management, or related disciplines
• Experience conducting security risk assessments and evaluating security controls in various environments
• Solid understanding of cybersecurity governance, risk management, compliance frameworks, and third-party risk management practices
• Extensive knowledge of industry frameworks and standards, including NIST CSF and ISO 27001